[Bug 1379441] Re: installation fails when /var/cache/lxc is read-only

[Serge Hallyn]

Thanks for the bug report and the patch.  I'm a bit concerned about
supporting this.  I understand why you want it, but lxc in general won't
work well with a read-only cache, so an install failure early on would
seem preferable to a lxc-create failure later on.

Would using an overlayfs of the cache in the container have any
significant downsides?

Or, alternatively, you could simply bind-mount /var/cache/lxc into the
container rw, but (if you really don't trust the container) have
apparmor deny writes.

If we were to go with your fix, I would prefer to do

        chmod 700 /var/cache/lxc || true

because the -w check could fail for reasons other than a ro-fs.


** Changed in: lxc (Ubuntu)
       Status: New => Incomplete

** Changed in: lxc (Ubuntu)
   Importance: Undecided => Low

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to lxc in Ubuntu.
https://bugs.launchpad.net/bugs/1379441

Title:
  installation fails when /var/cache/lxc is read-only

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1379441/+subscriptions